Description
openedon Jun 28, 2024
From documentation at https://www.elastic.co/guide/en/beats/filebeat/current/configuration-autodiscover-hints.html#_co_elastic_logsexclude_lines
This say we can use exclude_lines
input option with Docker or Kubernetes, but this dont work.
When reading code source, I see excludeLines
only for type: filestream
not for Docker or Log: https://github.com/elastic/beats/blob/main/filebeat/input/filestream/input.go#L402.
I see container input is using log input under the wood (https://github.com/elastic/beats/blob/main/filebeat/input/container/input.go#L74), that is deprecated, do you plan to use filestream instead?
edit:
Related to #34393
I see there is from 1 year a discussion around "replace type: container
by type: filestream
", some official documentation is with filestream, and some with container :-/
type: filestream --> https://github.com/elastic/beats/blob/main/deploy/kubernetes/filebeat-kubernetes.yaml
type: container --> https://www.elastic.co/guide/en/beats/filebeat/current/configuration-autodiscover.html
So the big question, how configure filebeat with kubernetes ^^ ?